[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTQEOwKhRC9U_dvbGjU0htuqnbFPR_8ej1ZsKOt-QlNA":3,"g5a-family:cisco\u002Fenterprise_nfv_infrastructure_software":154,"g5a-ex:cisco\u002Fenterprise_nfv_infrastructure_software@*":155},{"success":4,"data":5},true,{"product":6,"versions":52,"topVulnerabilitiesByEpss":70,"kevVulnerabilities":126,"seoMetadata":132,"meta":151},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":51},"cisco","enterprise_nfv_infrastructure_software",17,13,1,"2025-04-16",[14,18,20,22,24,26,28,30,33,35,37,39,41,43,45,47,49],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"3.5.1",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"3.5.2",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"3.6.1",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"3.6.2",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"3.6.3",{"version":27,"cve_count":11,"kev_count":16,"has_kev":17},"3.7.1",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"3.8.1",{"version":31,"cve_count":32,"kev_count":16,"has_kev":17},"3.9.1",3,{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},"4.18",{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},"4.4.1",{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.1",{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},"4.6.1",{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},"4.6.2",{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},"4.6.3",{"version":46,"cve_count":16,"kev_count":16,"has_kev":17},"4.7.1",{"version":48,"cve_count":16,"kev_count":16,"has_kev":17},"4.8.1",{"version":50,"cve_count":16,"kev_count":16,"has_kev":17},"4.9.1","Enterprise Nfv Infrastructure Software by Cisco is a technology product with 17 tracked versions and 13 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":11,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":32,"kev_count":16,"has_kev":17},{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},{"version":46,"cve_count":16,"kev_count":16,"has_kev":17},{"version":48,"cve_count":16,"kev_count":16,"has_kev":17},{"version":50,"cve_count":16,"kev_count":16,"has_kev":17},[71,78,84,91,95,99,104,109,116,122],{"cveId":72,"description":73,"publishedDate":12,"cvssScore":74,"cvssVersion":75,"severity":76,"isKev":4,"epssScore":77},"CVE-2025-32433","Erlang\u002FOTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.",10,"v3.1","Critical",0.98786,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":75,"severity":76,"isKev":17,"epssScore":83},"CVE-2021-34746","A vulnerability in the TACACS+ authentication, authorization and accounting (AAA) feature of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to bypass authentication and log in to an affected device as an administrator. This vulnerability is due to incomplete validation of user-supplied input that is passed to an authentication script. An attacker could exploit this vulnerability by injecting parameters into an authentication request. A successful exploit could allow the attacker to bypass authentication and log in as an administrator to the affected device.","2021-09-02",9.8,0.17661,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"cvssVersion":75,"severity":89,"isKev":17,"epssScore":90},"CVE-2022-20780","Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the VM. For more information about these vulnerabilities, see the Details section of this advisory.","2022-05-04",7.4,"High",0.11233,{"cveId":92,"description":86,"publishedDate":87,"cvssScore":93,"cvssVersion":75,"severity":76,"isKev":17,"epssScore":94},"CVE-2022-20777",9.9,0.11067,{"cveId":96,"description":86,"publishedDate":87,"cvssScore":97,"cvssVersion":75,"severity":89,"isKev":17,"epssScore":98},"CVE-2022-20779",8.8,0.10464,{"cveId":100,"description":101,"publishedDate":102,"cvssScore":82,"cvssVersion":75,"severity":76,"isKev":17,"epssScore":103},"CVE-2020-3470","Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulnerabilities are due to improper boundary checks for certain user-supplied input. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the API subsystem of an affected system. When this request is processed, an exploitable buffer overflow condition may occur. A successful exploit could allow the attacker to execute arbitrary code with root privileges on the underlying operating system (OS).","2020-11-18",0.04798,{"cveId":105,"description":106,"publishedDate":107,"cvssScore":97,"cvssVersion":75,"severity":89,"isKev":17,"epssScore":108},"CVE-2018-0279","A vulnerability in the Secure Copy Protocol (SCP) server of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to access the shell of the underlying Linux operating system on the affected device. The vulnerability is due to improper input validation of command arguments. An attacker could exploit this vulnerability by using crafted arguments when opening a connection to the affected device. An exploit could allow the attacker to gain shell access with a non-root user account to the underlying Linux operating system on the affected device. Due to the system design, access to the Linux shell could allow execution of additional attacks that may have a significant impact on the affected system. This vulnerability affects Cisco devices that are running release 3.7.1, 3.6.3, or earlier releases of Cisco Enterprise NFV Infrastructure Software (NFVIS) when access to the SCP server is allowed on the affected device. Cisco NFVIS Releases 3.5.x and 3.6.x do allow access to the SCP server by default, while Cisco NFVIS Release 3.7.1 does not. Cisco Bug IDs: CSCvh25026.","2018-05-17",0.04351,{"cveId":110,"description":111,"publishedDate":112,"cvssScore":113,"cvssVersion":114,"severity":89,"isKev":17,"epssScore":115},"CVE-2019-1894","A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite or read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to improper input validation in NFVIS filesystem commands. An attacker could exploit this vulnerability by using crafted variables during the execution of an affected command. A successful exploit could allow the attacker to overwrite or read arbitrary files on the underlying OS.","2019-07-06",7.2,"v3.0",0.03451,{"cveId":117,"description":118,"publishedDate":119,"cvssScore":120,"cvssVersion":75,"severity":89,"isKev":17,"epssScore":121},"CVE-2021-1421","A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to perform a command injection attack on an affected device. The vulnerability is due to insufficient validation of user-supplied input to a configuration command. An attacker could exploit this vulnerability by including malicious input during the execution of this command. A successful exploit could allow a non-privileged attacker authenticated in the restricted CLI to execute arbitrary commands on the underlying operating system (OS) with root privileges.","2021-05-06",7.8,0.00666,{"cveId":123,"description":124,"publishedDate":112,"cvssScore":120,"cvssVersion":75,"severity":89,"isKev":17,"epssScore":125},"CVE-2019-1893","A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) of an affected device as root. The vulnerability is due to insufficient input validation of a configuration file that is accessible to a local shell user. An attacker could exploit this vulnerability by including malicious input during the execution of this file. A successful exploit could allow the attacker to execute arbitrary commands on the underlying OS as root.",0.00634,[127],{"cveId":72,"description":73,"publishedDate":12,"cvssScore":74,"severity":76,"isKev":4,"epssScore":77,"cisaVulnName":128,"cisaDateAdded":129,"cisaShortDescription":130,"cisaRequiredAction":131},"Erlang Erlang\u002FOTP SSH Server Missing Authentication for Critical Function Vulnerability","2025-06-09","Erlang Erlang\u002FOTP SSH server contains a missing authentication for critical function vulnerability. This could allow an attacker to execute arbitrary commands without valid credentials, potentially leading to unauthenticated remote code execution (RCE). By exploiting a flaw in how SSH protocol messages are handled, a malicious actor could gain unauthorized access to affected systems. This vulnerability could affect various products that implement Erlang\u002FOTP SSH server, including—but not limited to—Cisco, NetApp, and SUSE.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":133,"metaDescription":134,"keywords":135,"structuredData":136},"Enterprise Nfv Infrastructure Software by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Enterprise Nfv Infrastructure Software by Cisco covering 17 versions with 13 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Nfv Infrastructure Software vulnerabilities, Enterprise Nfv Infrastructure Software security, Enterprise Nfv Infrastructure Software CVE, Cisco Enterprise Nfv Infrastructure Software, Enterprise Nfv Infrastructure Software threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Enterprise Nfv Infrastructure Software KEV, Enterprise Nfv Infrastructure Software exploited vulnerabilities",{"@context":137,"@type":138,"name":139,"description":134,"url":140,"manufacturer":141,"applicationCategory":145,"softwareVersion":146,"mainEntity":147},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Nfv Infrastructure Software","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fenterprise_nfv_infrastructure_software",{"@type":142,"name":143,"url":144},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","17 versions tracked",{"@type":148,"name":149,"description":150,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Nfv Infrastructure Software Security Vulnerabilities","Security vulnerabilities affecting Enterprise Nfv Infrastructure Software by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":152,"apiVersion":153},"2026-10-18T23:49:02.292Z","3.0",[],{"rows":156,"total":11,"capped":17,"failed":16},[157],{"cveId":72,"name":128,"severity":76,"cvss":74,"added":129,"epss":77,"published":158,"ranges":159,"checked":4,"hits":161,"covers":17},"2025-04-16T22:15:14.373",[160],"before 4.18",[]]